Campaign-specific starting point

Emergency policy for Laravel Lang package compromise

This is a conservative starting point selected from the reviewed public recipe registry based on the campaign’s first reviewed artifact class. It is not automatically applied.

Selected recipe

Block known-malicious package installs

Block supported install actions for packages already classified as malicious.

Matcher: package = malicious-package. Decision: block.

Review the actual artifact identifiers, affected environment, coverage, and campaign evidence before rollout. The recipe does not claim Guard covers every stage of the campaign.

Open in Policy StudioReview recipe evidenceBack to campaign

Campaign sources